Potential Malicious Usage of CloudTrail System Manager — Detection Rule

Detect when System Manager successfully executes commands against an instance.

Read the full analysis on IntelFusions